MalwareHealthcarePIIIdentity (basic)LowContained

Fairfax Oral and Maxillofacial Surgery

bd_a6a1a00b18329708 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Aug 22, 2023

To disclose

—

Affected

26state residents only

Linked

7 filings

Confidence

67%

Full breach record for Fairfax Oral and Maxillofacial Surgery →

Fairfax Oral and Maxillofacial Surgery reported a ransomware incident to the New Hampshire Attorney General on August 22, 2023. The incident occurred on May 16, 2023, resulting in file encryption. 26 New Hampshire residents were notified. No evidence of data acquisition was found, but credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

May 16, 2023

Begins

Aug 22, 2023

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_9606cba0447075dc2023-08-22Candidate
Montana State AGbd_d9a83af915c967202023-08-22Candidate
Massachusetts State AGbd_f0ef0036c0883fcb2023-08-28 · +6dVerified
HHS OCRbd_5d1869a4dbd9a4002023-07-14 · +39dCandidate

Show 2 more filings ↓up to 52d gap

Maine State AGbd_a3ef06b743dbf4b32023-10-12 · +51dVerified by operator
New Hampshire State AGbd_cd34df02272ee4ab2023-10-13 · +52dVerified

Name: Fairfax Oral and Maxillofacial Surgery
norm: fairfax oral and maxillofacial surgery

Name: Fairfax Oral and Maxillofacial Surgery
norm: fairfax oral and maxillofacial surgery

Discovered: —
Breach occurred: May 16, 2023
Materiality determined: —
Notification sent: Aug 18, 2023
Affected individuals: 26state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Began an internal investigation
Notified law enforcement
Engaged a forensic security firm to investigate and to confirm the security of its computer systems
Notifying all individuals whose personal information was contained on the encrypted systems
Providing these notifications via letters sent by first-class United States mail
Offering a complimentary one-year membership of Experian IdentityWorks SM Credit 3B
Changes made: Engaged a forensic security firm to investigate and to confirm the security of its computer systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

HHS OCRJul 14 · first

Maine State AG+39d

Montana State AG+39d

New Hampshire State AG+39d · this page

Massachusetts State AG+45d

Maine State AG+90d

New Hampshire State AG+91d

Pattern: first filing Jul 14 (VA), last Oct 13 (NH) — a 91-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/fairfax-oral-maxillofacial-surgery-20230822.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 22, 2023
Raw hash: ebcb7ca5bd4eb759e2c5ce0ea2f9ec386e1c9d74f58388ef49270fa45705951e

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityFairfax Oral and Maxillofacial Surgery

Victim entityFairfax Oral and Maxillofacial Surgery

IncidentRansomware

Stated responseBegan an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov